Server error in "Server Resource Manager Home" for restricted user

Article:TECH173043  |  Created: 2011-10-27  |  Updated: 2012-07-28  |  Article URL http://www.symantec.com/docs/TECH173043
Article Type
Technical Solution


Issue



While accessing the Symantec Management Console as a restricted user, and going to Resource Manager > Server Resource Manager Home, a server error occurs for the Computer Summary and Disks Space Utilization web parts.

 


Error



Server Error in '/Altiris/ServerManagementSuite' Application.

The current user does not have required permission 'read' to load item 'd32db857-53f0-4fe8-81cf-7c25935c621e'.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: Altiris.NS.Exceptions.AeXUnauthorizedAccessException: The current user does not have required permission 'read' to load item 'd32db857-53f0-4fe8-81cf-7c25935c621e'.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below. 

Stack Trace:

[AeXUnauthorizedAccessException: The current user does not have required permission 'read' to load item 'd32db857-53f0-4fe8-81cf-7c25935c621e'.]
   Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(String message) +522
   Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem item, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags) +392
   Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags) +889
   Altiris.NS.ItemManagement.Item.GetItem(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags) +54
   Altiris.NS.ItemManagement.Item.GetItem(Guid itemGuid) +85
   Altiris.NS.ItemManagement.Item.GetItem(Guid itemGuid) +44
   Altiris.ServerManagementSuite.Web.DataSourcePage.GetDataSource(Guid dataSourceId) +31
   Altiris.ServerManagementSuite.Web.DataSourcePage.OnPreRender(EventArgs e) +391
   System.Web.UI.Control.PreRenderRecursiveInternal() +108
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +3394
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.4952; ASP.NET Version:2.0.50727.4955

 


Environment



  • Server Management Suite 7.1 SP2  (and previous versions)

 


Cause



This error occurs due to a lack of proper handling of missing permissions. Instead of displaying a Symantec, "Access Denied", error, this web exception occurs.

There is a hidden reports folder that the associated Security Role (that of which the restricted user is a member of) needs Read permissions to. If permissions to the root of Reports has been removed for this Security Role in the Security Role Manager, the necesssary permissions for this hidden folder will not exist.

 


Solution



This is a known issue and has been submitted to development. This article will be updated when this defect is resolved in a future release.

   
Workaround

Note:  The following workaround is provided on a "use at your own risk" basis. Symantec recommends backing up your database prior to making any changes directly in SQL
  

 

  1. Unhide the hidden reports folder, Server Management Suite, by running the following SQL script in Microsoft SQL Server Management Studio against the CMDB:
update Item
set [Attributes] = '18'
where [Guid] = '6F127B0C-480A-4D61-86CE-2BFE8017AA32'
  
  1. In the Security Role Manager, choose the associated Security Role from the Role: drop-down menu
      
  2. In the View: drop-down menu, choose Reports, then the pencil icon for Edit
      
  3. Enable the checkbox for Reports > Server Management Suite, Save Changes, Save Changes
      
  4. Optional:  Hide this reports folder again by running the following SQL:

update Item
set [Attributes] = '23'
where [Guid] = '6F127B0C-480A-4D61-86CE-2BFE8017AA32'
  
     

 

 




Article URL http://www.symantec.com/docs/TECH173043


Terms of use for this information are found in Legal Notices